Comments

fake Xero accounting software invoice delivers Dridex banking Trojan — 3 Comments

  1. I received a similar fake email invoice today from somebody representing themselves as Xero.
    _________________

    Dear Customer

    Here’s your Xero subscription invoice for the previous billing period.

    View your bill: INV-0606237

    You’ve already provided us with your payment details so unless advice to the contrary is received from you by 15 Nov 2017, the amount will be debited from your credit card on or after 22 Nov 2017.

    Need help updating your payment details or understanding how Xero bills you? Click here
    Need help with your online subscription invoice? Click here
    Need a question answered about Xero? Ask it here

    Regards,
    The Xero Billing Team
    _________________

    I can’t post a screenshot in this reply but viewing the source here is the link that bill# INV-0606237 connects with:

    hxxps://parrascomau-my.sharepoint.com/personal/mariaf_parras_com_au/_layouts/15/guestaccess.aspx?docid=057e90c0a9f0a43bc903e5ab8f4ea556f&authkey=ATQRJaGi_Jo4yxhB8geEt1A&e=92a9af8c9e5a487fa257d43b5143c642

    Word of caution, be wary and never open any links in emails such as these.

Leave a Reply

Your email address will not be published. Required fields are marked *